{"id":"CVE-2026-118865","published":"2026-11-03T22:19:29.073","lastModified":"2026-11-03T22:19:29.073","description":"An authenticated OS command injection vulnerability exists in the Offline Download component (USB storage allocation) of Archer AX3000 v2. When a USB storage device is attached, an authenticated administrator can submit a crafted path value containing shell metacharacters that is not properly neutralized before being passed to a system command. \n\nSuccessful exploitation may allow arbitrary command execution on the affected device.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://www.tp-link.com/us/support/download/archer-ax3000/v2.60/#Firmware","tags":[]},{"url":"https://www.tp-link.com/us/support/faq/5380/","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}